8 matches found
CVE-2026-63766_exploit
CVE-2026-63766 — GPT-SoVITS 認証なし OS コマンドインジェクション GPT-SoVITS の Gradio Web UI （webui.py）における 認証なしリモートコード実行。 音声処理ヘルパー（openasr、openslice、opendenoise、openuvr5）は、 サニタイズされていない Gradio テキストボックスの パス 値を、Popen..., shell=True で実行されるシェルコマンドに 直接挿入します。パスは cleanpath に渡されるだけで、これは単に 先頭・末尾の引用符とスペースを取り除くだけです — 途中...
EUVD-2025-7027
Malicious code in bioql PyPI...
CVE-2024-12065
A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an attacker to access any file on the system by sending multiple crafted requests to the server. The issue is due to improper input validation in the gradio web UI component...
CVE-2024-12065 Local File Inclusion in haotian-liu/llava
A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an attacker to access any file on the system by sending multiple crafted requests to the server. The issue is due to improper input validation in the gradio web UI component...
CVE-2024-12065 Local File Inclusion in haotian-liu/llava
A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an attacker to access any file on the system by sending multiple crafted requests to the server. The issue is due to improper input validation in the gradio web UI component...
CVE-2024-12065
A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an attacker to access any file on the system by sending multiple crafted requests to the server. The issue is due to improper input validation in the gradio web UI component...
CVE-2024-12065
CVE-2024-12065 affects the haotian-liu/llava project (commit c121f04). The vulnerability is a local file inclusion caused by improper input validation in the Gradio-based web UI component, allowing an attacker to access arbitrary files on the server via crafted requests. The collection of connect...
CVE-2024-12065: Improper Limitation of a Pathname to a Restricted Directory
A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an attacker to access any file on the system by sending multiple crafted requests to the server. The issue is due to improper input validation in the gradio web UI component...